| name | cip-policy |
| title | CIP Policy Drafting |
| description | Drafts a U.S. Customer Identification Program (CIP) policy compliant with USA PATRIOT Act Section 326 and 31 CFR 1020.220. Covers identity collection, verification, OFAC screening, CDD/beneficial ownership, recordkeeping, and governance. Trigger when the user needs to create or update a CIP policy, AML onboarding procedures, or exam-ready Section 326 documentation. |
| author | CaseMark |
| author_url | https://github.com/CaseMark/skills/tree/main/skills/legal/cip-policy |
| license | Apache-2.0 |
| version | 0.1.1 |
| execution_mode | open |
| jurisdiction | us |
| practice | white-collar |
| language | en |
| tags | ["drafting","regulatory","research"] |
CIP Policy Drafting
Draft an exam-ready CIP policy covering identity collection, verification, screening, recordkeeping, and governance under Section 326 / 31 CFR 1020.220.
Prerequisites
Gather before drafting:
- Institution profile — charter type, products, channels, footprint, risk assessment
- AML/BSA program — related policies (CDD/EDD, SAR, sanctions)
- Account taxonomy — definitions of "account" and product coverage
- Onboarding procedures — current workflows and system capabilities
Quick Start
- Collect institution profile and existing AML/BSA program details
- Walk through each policy section below in order
- Populate tables with institution-specific data
- Tag uncertain regulatory citations as
[VERIFY]
- Route draft for BSA Officer and board review
Policy Sections
1. Header
Effective date, version, approving authority, policy owner.
2. Purpose and Authority
- Cite Section 326 and 31 CFR 1020.220
- State CIP is mandatory and integrated with BSA/AML program
3. Scope and Definitions
- Covered accounts, channels, customer types
- Narrowly defined exclusions with rule basis cited
- Define "customer," "account," "beneficial owner"
4. Minimum Information Collection
| Customer Type | Required Data | Notes |
|---|
| Individual | Name, DOB, residential address, ID number | Physical address required |
| Entity | Legal name, principal place of business, EIN/TIN, formation docs | Identify authorized signers |
| Non-U.S. | Passport/foreign ID number + country | Risk-based verification |
5. Verification Methods
| Method | When Used | Record |
|---|
| Documentary | Default | Doc type, issuer, number, expiration |
| Non-documentary | No suitable docs or higher risk | Source, date, result, analyst notes |
Documentary checklist: genuine/unaltered, photo matches, name/DOB/address match, unexpired (or approved exception).
